Users Guide

Security Commands 1089
console(config-radius-da)# exit
console(config)#dot1x system-auth-control
console(config)#clear authentication sessions
ignore
Use this command to set the switch to ignore certain authentication/session
identification parameters from RADIUS CoA clients. Use the no form of the
command to restore checking of the specific authentication parameters as
configured by the auth-type command.
Syntax
ignore {session-key | server-key}
no ignore {session-key | server-key}
• Session-key—Do not attempt to authenticate with the session key.
• Server-key—Do not attempt to authenticate with the server key.
Default Configuration
The default is to authenticate using all parameters present in the received
message as specified by the configured auth-type.
Command Modes
Dynamic RADIUS Configuration
User Guidelines
This command specifies the attributes to validate before acting on a CoA or
disconnect request. If session-key is specified and the session ID is valid,
authentication succeeds even if the session-key does not match. If the
session-key (Acct-Session-ID) does not match, a Disconnect-ACK is sent.
The ignore command refines the all parameter to limit the attribute
matching.
Setting the auth-type to session-key in conjunction with setting the ignore
session-key is invalid and causes all configured servers to authenticate with no
warnings.